#Cti

Showing 56 of 56 repositories tagged #cti, ranked by stars

sherlock-project
sherlock-project
sherlock

Hunt down social media accounts by username across social networks

Score
100
β˜… 86.2k β‘‚ 10.1k +134/day
Python
smicallef
smicallef
spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Score
50
β˜… 19.3k β‘‚ 3.2k +37/day
Python
OpenCTI-Platform
OpenCTI-Platform
opencti

Open Cyber Threat Intelligence Platform

Score
100
β˜… 9.7k β‘‚ 1.4k +4/day
TypeScript
MISP
MISP
MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Score
98
β˜… 6.4k β‘‚ 1.6k +2/day
PHP
ibnaleem
ibnaleem
gosearch

πŸ” Search anyone's digital footprint across 300+ websites

Score
0
β˜… 3.5k β‘‚ 318 +16/day
Go
mitre-attack
mitre-attack
attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

Score
95
β˜… 2.4k β‘‚ 700 +3/day
TypeScript
mthcht
mthcht
awesome-lists

Awesome Security lists for SOC/CERT/CTI

Score
93
β˜… 1.7k β‘‚ 200 β€”
YARA
BushidoUK
BushidoUK
Ransomware-Tool-Matrix

A resource containing all the tools each ransomware gangs uses

Score
89
β˜… 1.4k β‘‚ 155 +1/day
0x6rss
0x6rss
matkap

Matkap - hunt down malicious Telegram bots

Score
0
β˜… 968 β‘‚ 171 β€”
Python
BushidoUK
BushidoUK
Open-source-tools-for-CTI

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers

Score
77
β˜… 810 β‘‚ 142 +2/day
mitre-attack
mitre-attack
mitreattack-python

A python module for working with ATT&CK

Score
86
β˜… 720 β‘‚ 169 β€”
HTML
stanfrbd
stanfrbd
cyberbro

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Score
80
β˜… 671 β‘‚ 70 +2/day
Python
mitre-attack
mitre-attack
attack-stix-data

STIX data representing MITRE ATT&CK

Score
82
β˜… 604 β‘‚ 135 +3/day
Python
mitre-attack
mitre-attack
attack-scripts

Scripts and a (future) library to improve users' interactions with the ATT&CK content

Score
57
β˜… 595 β‘‚ 149 β€”
Python
mitre-attack
mitre-attack
attack-website

MITRE ATT&CK Website

Score
84
β˜… 582 β‘‚ 170 β€”
HTML
OpenCTI-Platform
OpenCTI-Platform
connectors

OpenCTI Connectors

Score
91
β˜… 562 β‘‚ 610 +3/day
Python
center-for-threat-informed-defense
center-for-threat-informed-defense
attack-control-framework-mappings

🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

Score
43
β˜… 499 β‘‚ 90 +1/day
Python
prodaft
prodaft
cradle

CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taking, automated data linking, interactive visualizations, and robust access control. Enhance your CTI workflow from analysis to reportingβ€”all in one secure space.

Score
75
β˜… 343 β‘‚ 20 β€”
JavaScript
spmedia
spmedia
Threat-Actor-Usernames-Scrape

A collection & lists of intel and usernames scraped from various cybercrime sources & forums. DarkForums, HackForums, Patched, Cracked, BreachForums, OGUser, XSS, Dread, & more

Score
73
β˜… 221 β‘‚ 30 β€”
SEKOIA-IO
SEKOIA-IO
Community

Welcome to the SEKOIA.IO Community repository!

Score
0
β˜… 192 β‘‚ 47 β€”
HTML
adulau
adulau
the-art-of-pivoting

The Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World

Score
68
β˜… 186 β‘‚ 11 β€”
HTML
curated-intel
curated-intel
Log4Shell-IOCs

A collection of intelligence about Log4Shell and its exploitation activity.

Score
30
β˜… 181 β‘‚ 37 β€”
Python
docintelapp
docintelapp
DocIntel

Open Source Platform for storing, organizing, and searching documents related to cyber threats

Score
27
β˜… 172 β‘‚ 27 β€”
JavaScript
typedb-osi
typedb-osi
typedb-cti

Open Source Threat Intelligence Platform

Score
64
β˜… 169 β‘‚ 20 β€”
Python
oasis-open
oasis-open
cti-stix-visualization

OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships

Score
100
β˜… 168 β‘‚ 46 +1/day
JavaScript
mthcht
mthcht
ThreatIntel-Reports

Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

Score
70
β˜… 167 β‘‚ 25 +1/day
Python
BushidoUK
BushidoUK
CTI-Lexicon

Dictionary of CTI-related acronyms, terms, and jargon

Score
41
β˜… 150 β‘‚ 12 β€”
OpenCTI-Platform
OpenCTI-Platform
client-python

OpenCTI Python Client

Score
66
β˜… 147 β‘‚ 136 +1/day
Python
rodanmaharjan
rodanmaharjan
ThreatIntelligence

This repository contains Malicious Indicator of Compromise (IOC) blocklist for MISP, firewall which is vital for cybersecurity professionals to enhance threat detection and improve incident response capabilities.

Score
32
β˜… 122 β‘‚ 23 +1/day
Python
telekom-security
telekom-security
malware_analysis

This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.

Score
61
β˜… 122 β‘‚ 18 β€”
Python
traut
traut
stixview

STIX2 graph visualisation library in JS

Score
55
β˜… 100 β‘‚ 19 β€”
HTML
gripebomb
gripebomb
ThreatDeck

Terminal-based threat intelligence monitoring and alerting platform

Score
100
β˜… 95 β‘‚ 4 β€”
Rust
BushidoUK
BushidoUK
Exploring-APT-campaigns

Further investigation in to APT campaigns disclosed by private security firms and security agencies

Score
23
β˜… 85 β‘‚ 21 β€”
peng-gao-lab
peng-gao-lab
ctinexus

CTINexus is a framework that leverages optimized in-context learning of LLMs to enable data-efficient extraction of cyber threat intelligence and the construction of high-quality cybersecurity knowledge graphs.

Score
0
β˜… 84 β‘‚ 17 β€”
Python
ibnaleem
ibnaleem
rules

Lastest Hashcat rules for password cracking

Score
59
β˜… 72 β‘‚ 13 β€”
blackstork-io
blackstork-io
blackstork-cli

A source-available command-line tool for cybersecurity reporting

Score
52
β˜… 71 β‘‚ 5 β€”
Go
ChistaDev
ChistaDev
Chista

Chista | Open Threat Intelligence Framework

Score
11
β˜… 62 β‘‚ 4 β€”
Go
mitre-attack
mitre-attack
attack-evals

ATT&CK Evaluations website (DEPRECATED)

Score
20
β˜… 61 β‘‚ 22 β€”
HTML
BushidoUK
BushidoUK
Abused-Legitimate-Services

Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups

Score
14
β˜… 60 β‘‚ 7 β€”
dessertlab
dessertlab
cti-to-mitre-with-nlp

Replication package for the paper "Automatic Mapping of Unstructured Cyber Threat Intelligence: An Experimental Study" published at the IEEE International Symposium on Software Reliability Engineering (ISSRE) 2022

Score
16
β˜… 60 β‘‚ 11 β€”
Jupyter Notebook
jonaylor89
jonaylor89
sherlock-rs

Hunt down social media accounts by username across social networks

Score
0
β˜… 56 β‘‚ 1 β€”
Rust
tasooshi
tasooshi
exfilkit

Data exfiltration utility for testing detection capabilities

Score
18
β˜… 56 β‘‚ 17 β€”
Python
ThreatRecall
ThreatRecall
zettelforge

Agentic memory for CTI in Python β€” STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

Score
45
β˜… 53 β‘‚ 8 +2/day
Python
JMousqueton
JMousqueton
CTI-MSTeams-Bot

πŸ€– Bot to get the last Cyber Security information in a Microsoft Teams channel πŸ΄β€β˜ οΈ

Score
48
β˜… 51 β‘‚ 10 β€”
Python
oasis-open
oasis-open
cti-stix-generator

OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/cti-stix-generator

Score
50
β˜… 43 β‘‚ 15 β€”
Python
EndlessFractal
EndlessFractal
Threat-Intel-Feed

Automated threat intel feed parsing and consolidationπŸ’»πŸ‘ΎπŸ€–

Score
39
β˜… 42 β‘‚ 10 β€”
Python
sudo-flgr
sudo-flgr
anhanga

Plataforma de CTI AssΓ­ncrona focada em Crimes Financeiros (Pix/Cripto) e Compliance RegulatΓ³rio (Lei 14.790). Powered by LangGraph & AsyncIO.

Score
34
β˜… 41 β‘‚ 11 β€”
Python
brayden031
brayden031
varalyze

Cyber threat intelligence tool suite.

Score
7
β˜… 41 β‘‚ 4 β€”
Python
devops-ia
devops-ia
helm-opencti

Helm chart for Open Cyber Threat Intelligence Platform

Score
50
β˜… 36 β‘‚ 21 β€”
Go Template
blackstork-io
blackstork-io
blackstork-templates

Open-source BlackStork templates for cybersecurity use cases

Score
36
β˜… 33 β‘‚ 4 β€”
HCL
StephenOTT
StephenOTT
STIX-Java

STIX 2.x Java Library

Score
9
β˜… 30 β‘‚ 12 β€”
Java
CyCat-project
CyCat-project
cycat-service

CyCAT.org API back-end server including crawlers

Score
5
β˜… 29 β‘‚ 3 β€”
Python
traut
traut
jupyter-widget-stixview

STIX2 graph widget for Jupyter notebooks, powered by stixview library

Score
0
β˜… 25 β‘‚ 4 β€”
Jupyter Notebook
PwnLabMe-Project
PwnLabMe-Project
Security-Resources

Sharing our knowledge and resources in the field of cyber security.

Score
0
β˜… 20 β‘‚ 5 β€”
GokbakarE
GokbakarE
RuleSetRAT

A curated collection of YARA rules and structured JSON reports designed to identify and analyze various malware builder variants, for educational and research purposes only.

Score
2
β˜… 17 β‘‚ 1 β€”
YARA
anpa1200
anpa1200
Unpacker

Packer detection and unpacking workflow for malware analysis: UPX, ASPack, Themida, VMProtect, PE and ELF.

Score
25
β˜… 16 β‘‚ 4 +4/day
Python
Related Topics
#cybersecurity#threat-intelligence#cyber-threat-intelligence#osint#python#threatintel#security#threat-hunting#mitre-attack#pentesting#intelligence#stix

Β© 2026 GitRepoTrend Β· GitHub repositories by topic Β· Updated weekly